Effective date: 25 August 2026. This policy explains how Changsha Gefan E-commerce Co., Ltd. collects, uses, and protects personal information. Company address: No. 53 Bingshan Shangpian Group, Binghe Village, Guandu Town, Liuyang City, Changsha City - 410000, China (CN).
Back to the GEFAN HomepageThis Privacy Policy explains how Changsha Gefan E-commerce Co., Ltd. collects, uses, and protects personal information when you visit our website at www.gefan.autos or use the computer systems design and computer integrated systems design services we provide. The policy applies to information gathered through our website, through email and phone contact, and through the delivery of our services. By accessing the website or contacting us, you agree to the practices described here. If you do not agree with any part of this policy, you should stop using the website and contact us with your questions. We encourage you to read the whole document, because it explains your rights and the choices you can make about your data. We keep this policy under regular review and will post any changes on this page. Where a change is significant, we will notify you through a prominent notice on the website or by email.
The services described in this policy are developed and operated by the developer GeFan on behalf of Changsha Gefan E-commerce Co., Ltd., a company registered in China. Our registered address is No. 53 Bingshan Shangpian Group, Binghe Village, Guandu Town, Liuyang City, Changsha City - 410000, China (CN). We focus on computer systems design and computer integrated systems design for the e-commerce and retail sector. This means we design the systems that store product catalogues, process orders, manage logistics, and support customer service. When this policy refers to the Company, it means Changsha Gefan E-commerce Co., Ltd. and the developer GeFan who operates the services. When this policy refers to the Services, it means the website, the consultation work, and the system design projects we carry out for our clients. If you have any question about who processes your data, you can reach the Company at touch@gefan.autos or +14424194164.
This policy covers information collected from visitors to the website, from people who contact us, and from clients who engage our design services. It also covers information received through our business partners and suppliers. The policy does not cover the practices of third-party websites or services that may be linked from our pages, unless we state otherwise. Where a client asks us to design a system that handles the data of that client, we act as a service provider. In that case the client remains responsible for their own privacy obligations toward their customers, and we follow the instructions the client gives us about their data. We process that data only for the purpose of delivering the agreed services. This separation of responsibilities is described in more detail in the sections on sharing and retention below.
We collect information that falls into two broad groups. The first group is information you give us directly, such as your name, email address, phone number, and the contents of your messages. The second group is information collected automatically when you use the website, such as your device type, browser, approximate location, pages visited, and the time of your visit. We collect only the information that is needed to run the website, respond to your enquiries, and deliver the services you request. We do not collect more information than the purpose requires, and we avoid gathering sensitive categories of personal data unless you provide them voluntarily in a message. We also collect information that businesses provide when they ask for a proposal, including company names, store details, catalogue sizes, and order volumes.
When you use the contact form on our website, you provide your name, your email address, a subject line, and the text of your message. When you email us directly, we receive your email address and the content of your message. When you call us by phone, we may keep a record of the call, the time, and the reason for the call. When you engage us for a design project, we collect the business information needed to carry out the work, such as product lists, pricing structures, and details about your existing systems. We treat everything you share as confidential and use it only for the purpose you intended. You are never required to share information beyond what is necessary to answer your question or complete your project. If you prefer not to share certain details over email, you can ask to discuss them by phone instead.
Like most websites, we automatically record technical information when you visit. This includes your IP address, the type of browser and operating system you use, the screen size of your device, the pages you view, how long you stay, and the website that referred you to us. We use this information to understand how the website is used, to keep it secure, to diagnose problems, and to improve the layout and content for visitors. This automatic information is usually collected in an aggregated form, which means it cannot identify you personally on its own. When it is combined with other data, we use it only for the operational purposes described in this policy. We keep this technical data for a limited time and do not sell it to anyone. Third-party analytics tools that we may use are described in the section on third-party services below.
In some cases we receive information about you or your business from third parties. For example, a business partner may introduce you to us and share your contact details with your consent. A client may provide the contact information of their team members so that we can coordinate a project. We may also receive technical information from analytics providers who help us measure website traffic. When we receive information from a third party, we ask that the third party has a lawful basis to share it and that they have informed you accordingly. We use such information only for the same purposes as if you had given it to us directly. We recommend that you review the privacy practices of any partner or client who shares your details with us. If you believe your information was shared without your consent, please contact us and we will investigate and correct the matter.
We use your information for clearly defined purposes. We use contact details to respond to your enquiries, prepare proposals, schedule meetings, and provide the services you order. We use business information to design and build the computer systems described in your project, to test them, and to support them after launch. We use automatic technical data to operate and improve the website and to keep it secure. We may use your contact details to send you updates about your project, or to share news about our services, only where you have agreed to receive such messages. We do not sell personal information to third parties, and we do not use personal information for automated decision-making that has legal effects on you. Every use of your information is tied to a specific purpose described in this policy, and we stop using it once that purpose is complete.
Under data protection laws, every use of personal information must rest on a lawful basis. We rely on the following bases for our processing. We process information when it is necessary to perform a contract with you, for example when we deliver a design project you have ordered. We process information when it is necessary for our legitimate interests, such as operating the website, protecting our systems, and improving our services. We process information when you have given consent, for example when you agree to receive marketing messages. We also process information when required to comply with a legal obligation. Where we rely on legitimate interests, we balance those interests against your rights and freedoms and keep the processing proportionate. You may ask us, at any time, to explain which legal basis applies to a particular use of your information, and we will provide that explanation.
The Company operates from China, and the computer systems we design for our clients are usually hosted within the region where the client operates. If your information is transferred to another country, we take steps to make sure it receives a level of protection equivalent to the level required in your own jurisdiction. This may include standard contractual clauses, consent where the law requires it, or reliance on adequacy decisions. When a client asks us to handle data across borders as part of a system design project, we follow the data protection rules applicable to that client and document the transfer arrangements. Because the website is accessible from many countries, your technical data may be processed in our hosting region. We will continue to review transfer mechanisms as regulations evolve and update this policy to reflect those changes.
We keep your personal information only for as long as needed to fulfil the purposes described in this policy. Enquiry correspondence is usually retained for a limited period, so that we can answer follow-up questions and improve our response quality. Project records are retained for the duration of the engagement and for a reasonable period afterwards, in line with business record-keeping practice. Technical logs and automatic data are retained for a short period and then deleted or aggregated. When we no longer need information, we delete it securely or remove the details that could identify you. Legal obligations may require us to keep certain records for a longer period, and in that case we restrict the use of those records to compliance purposes. You can ask us to tell you how long we keep a particular type of information, and we will respond within a reasonable time.
We use reasonable technical and organisational measures to protect your information from loss, misuse, and unauthorised access. These measures include encrypted data transmission where appropriate, restricted access to systems, controlled permissions for our team, and routine security reviews of the services we operate. We limit access to personal information to the people who need it to perform their duties. We require the service providers who handle data on our behalf to apply comparable safeguards. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a data breach occurs that is likely to put your rights and freedoms at risk, we will notify the relevant authorities and affected individuals as required by law. We keep this policy updated with the security practices we apply, and we review them regularly as threats and technologies change.
Our website and services are directed to businesses and to adults who are at least eighteen years old. We do not knowingly collect personal information from children. If you are a parent or guardian and you believe that a child has provided personal information to us, please contact us using the details in the Contact section of this policy. We will take steps to remove that information from our records and close any related enquiry, unless we are required to keep it by law. We encourage parents and guardians to supervise the online activity of children and to talk with them about sharing personal information on the internet. Because we design systems for retail businesses, it is possible that a client system processes data related to minors. In those cases the client is responsible for complying with the rules that apply to children, and we support that compliance through our data handling arrangements.
Depending on where you live, you may have rights over your personal information. These may include the right to access the information we hold about you, the right to correct inaccurate details, the right to request deletion, the right to restrict or object to certain processing, and the right to data portability where it applies. You may also withdraw any consent you have given, at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, contact us at touch@gefan.autos and describe the request. We will verify your identity before acting on your request and will respond within the time limits set by law. You also have the right to lodge a complaint with the data protection authority in your jurisdiction. We will not discriminate against you for exercising your rights.
Our website may contain links to third-party websites, payment providers, logistics partners, or other external services. This Privacy Policy does not apply to those third parties. When you leave our website, we encourage you to read the privacy policy of the site you visit, because their practices are outside our control. We are not responsible for the content, security, or data handling of external websites. Where a system we design connects to a third-party service such as a payment gateway or a carrier platform, the third party has its own policies that govern the data they receive. We will point you to those policies as part of the design documentation. If you find a broken or concerning link on our website, please report it to us so that we can review and, where appropriate, remove it.
We may update this Privacy Policy from time to time to reflect changes in our services, in technology, or in the law. When we make changes, we will revise the effective date at the top of this page and post the updated policy here. If a change materially affects the way we handle your information, we will notify you through a prominent notice on the website or by direct email to the address you have given us. We encourage you to review this page periodically so that you are always aware of how we collect and use personal information. Your continued use of the website after a change is posted means that you accept the updated policy. If you do not accept the updated policy, you should stop using the website and contact us with any concerns before continuing.
If you have questions about this Privacy Policy, or about the way we handle personal information, please contact us. You can reach the Company by email at touch@gefan.autos or by phone at +14424194164. Our business address is No. 53 Bingshan Shangpian Group, Binghe Village, Guandu Town, Liuyang City, Changsha City - 410000, China (CN). We aim to respond to all enquiries within one business day and to resolve any concern you raise as quickly as possible. If you write to us about your data, please describe the matter clearly and include a way to contact you. The developer GeFan operates the services described in this policy and works on behalf of the Company to review and answer your questions. We take every request seriously and will work with you to reach a fair outcome.